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Abstract 



o 

We formalize the notion of Herbrand Consistency in an appropriate way for bounded arithmetics, 
^ and show the existence of a finite fragment of IAq whose Herbrand Consistency is not provable in 

the thoery IAq. We also show the existence of an IAq— derivable Hi— sentence such that IAq cannot 
prove its Herbrand Consistency. 
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Herbrand Consistency of Finite Fragments of IAq 



1 Introduction 

A consequence of Godel's Second Incompleteness Theorem is IIi— separation of some mathematical the- 
ories; for example ZFC is not IIi— conservative over PA since ZFC h Con(PA) but (by Godel's theo- 
rem) PA l/Con(PA), where Con is the consistency predicate. Inside PA, the hierarchy {ISn}„^o is not 
Hi— conservative, since ISn+i h Con(ISn) (but again ISn l/Con(ISn)). As for the bounded arithmetics, 
we only know that the elementary arithmetic IAq + Exp is not Hi— conservative over IAq + /\j f2j (see 
Corollary 5.34 of [3]). One candidate for Hi— separating IAq + Exp from IAq was the Cut-Free Consis- 
tency of IAq (see [7]): it was already known that IAq + Exp h CFCon(IAo) and it was presumed that 
IAq 1/ CFCon(IAo), where CFCon stands for Cut-Free Consistency. Though this presumption took rather 
a long to be established (see [H]), it opened a new line of research. 

The problem of provability (or unprovability) of the cut-free consistency of weak arithmetics is an 
interesting (double) generalization of Godel's Second Incompleteness Theorem: the theory (being restricted 
to bounded or weak arithmetics) and also the consistency predicate are both weakened. Here, we do not 
intend to outline the history of this research line, and refer the reader to [HI [T^] . Nevertheless, we list 
some prominent results obtained so far, to put our new result in perspective. 

Herbrand Consistency is denoted by HCon and (Semantic) Tableau Consistency by TabCon. Adamow- 
icz (with Zbierski in 2001 [2J and) in 2002 [3] showed that IAq + ^ HCon(IAo + l^m) for m ^ 2. She 
had already shown the unprovability IAq + Qi \/ TabCon(IAo + fii) in 1996 (but appeared in 2001 as [1]). 
Salehi improved the result of [3] in [101 by showing that IAq + fii 1/ HCon(IAo + fii) (see also [12]) and 
the result of [2J in [HI [TU] by showing S l/HCon(5') where S is an IAq— derivable H2— sentence. This resit 
also implied that IAq 1/ HCon(IAo) holds for a re-axiomatization IAq of IAq. Willard [TB] showed in 2002 
that IAq 1/ TabCon(IAo) and also IAq 1/ HCon(IAo -|- f^o), where Qq is the axiom of the totality of the 
squaring function Qq : \/x3y[y = x ■ x]. This was improved in [12] by showing IAq 1/ HCon(IAo), without 
using the Qq axiom. It was also proved in [13] that V \f HCon(V^) for an IAq— derivable Hi— sentence V . 
Kolodziejczyk [B] showed in 2006 that the unprovability IAq + /\j f2j 1/ HCon(IAo -|- l^i) holds; his result 
was stronger in a sense that it showed IAq + /\j fij 1/ HCon(S + fii) for a finite fragment S C IAq. 

In this paper we use an idea of an anonymous referee of [12] for defining evaluations in a more effective 



way (Definition 2.9) suitable for bounded arithmetics; this is a great step forward, noting our mentioning 
in [12] that "[o]ur definition of Herbrand Consistency is not bet suited for IAq". We then partially answer 
the question proposed by the anonymous referee of [11] (see Conjecture 4.1 in [H]). The author is grateful 
to both the referees, for suggestions and inspirations. 

We show the existence of a finite fragment T of IAq such that IAq l/HCon(T); this generalizes the 
result of [12]. We also show the existence of an IAq— derivable Hi— sentence \J such that IAq 1/ HCon(?7); 
this generalizes the main result of [21 (TU] and [TB]. For keeping the paper short, and to avoid repeating 
some technical details, we apologetically invite the reader to consult [HI [12]. We also assume familiarity 
with the Bible of this field [5]. 

2 Herbrand Consistency of Arithmetical Theories 

For getting a unique Skolemized formula, it is more convenient to negation normalize and rectify it. 

Definition 2.1 (Rectified Negation Normal Form) A formula is in negation normal form when no 
implication symbol — t- appears in it, and the negation symbol -1 appears behind the atomic formulas only. 
A formula is rectified when different quantifiers refer to different variables and no variable appears both 
free and bound in the formula. <^ 
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Any formula can be uniquely negation normalized by removing the implication connectives (replacing 
formulas of the form A ^ B with -lA V B) and then pushing the negations inside the sub-formulas by 
de Morgan's Law, until they get to the atomic formulas. Renaming the variables can rectify any formula. 
Thus one can negation normalize and rectify a formula uniquely, up to a variable renaming. 

Definition 2.2 (Skolemization) For any existential formula 3xA{x) with 0) free variables, let 

f3xA(x) ^6 '^^'"^ m—ary function symbol (which does not occur in A; cf. UJ). For any rectified negation 
normal formula (f we define (p^ inductively: / "^^^ 

• ip^ = (_p for atomic or negated- atomic formula ip 

• (V9 V ip f = ip^Vip^ " 

• (3x(p)^ = ^p^[f3xLp(x)i.y)/^] where y are the free variables of3x(p{x). 

Finally, the Skolemized form (f^^ of the formula (f is obtained by removing all the (universal) quantifiers of 

(f^. The resulted formula is an open (quantifier-less) formula, with probably some free variables. If those 

(free) variables are substituted with some ground (variable-free) terms, we obtain an Skolem instance of 

that formula. ^ 

V 

Summing up, to get an Skolem instance of a given formula (f we first negation normalize and then rectify 
it to get a formula y?^^^^; then we remove the quantifiers of (y}^^^^)"^ to get ((^9^'"^'^^)^^, and substituting 
its free variables with some ground terms, gives us an Skolem instance of the formula (p. Let us note that 
the Skolem instances of a formula are determined uniquely. 

Theorem 2.3 (Herbrand-Skolem-Godel) Any theory T is equi- consistent with its Skolemized theory. 
In other words, the theory T is consistent if and only if every finite set of Skolem instances of T is 
(propositionally) satisfiable. □ 

r -'-I _ ^ 

Example 2.4 In the language of arithmetic La = {0,5,+,-,^}, let Indn be the instance of induction 
principle ip^O) A Wx[ip{x) — )■ ■?/'(S(a;))] — )■ \/xip{x) for ip{x) = 3y[y ^ x ■ x Ay = x ■ x]. This is an axiom of 
the theory IAq. Rectified Negation Normal Form (Indn)^'^^^ o/Indn is 

yu[u ^ 0- OW 0- 0] V 3w 3z[z ^wwAz = w-w]A \/v[v ^ S{w) ■ S{w) Vv^ S{w) ■ S{w)] V 

\/x3y[y ^ X ■ X A y = X ■ x]. 

Ifc is the Skolem constant symbol for 3w [3z[z ^ w ■ w A z = w ■ w] A'ivlv ^ S{w) ■ S{w) y v ^ ■ S(w)]] , 
and q(x) is the Skolem function symbol for the formula 3z[z ^ x ■ x A z = x ■ x], then ((Indn)^^^^)'^ is 

yu[u ^ 0- OW 0- 0] V [H^) ^ c ■ c A q(c) = c ■ c] A yv[v ^ S(c) ■ S(c) W v ^ S(c) ■ S(c)]] V 

Va;[q(a;) ^ x ■ x A q(x) = x ■ x]. 
Finally, the Skolemized form (Indn)^"^ of (f is obtained as: 

[u^ 0- OWu^ 0- 0] V O^W ^ c ■ c A q(c) = c ■ c] A [t; ^ S(c) ■ S(c) Wv^ S(c) ■ S(c)]] V 

[q(x) ^ X ■ X A q(x) = x ■ x]. 
Substituting u/0, f/S(c) • S(c), x/t will result in the following Skolem instance of (f: 

[O^O-OWOy^O-O] V [[q(c) ^ c ■ c A q(c) = c ■ c] A [S(c) ■ S(c) ^ S(c) ■ S(c) V S(c) ■ S(c) ^ S(c) ■ S(c)]] V 

[q(t) ^ t-t Aq(t) =t -t]. <^ 
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Propositional satisfiability is usually arithmetized from the usual provability, only in propositional logic 
(see e.g. [5]); but in a series of more recent papers, this notion have been arithmetized differently, according 
to ones needs ([H El El El |9l [101 [HI [I2l [13]). We formalize the notion of propositional satisfiability by 
means of evaluations (as in the op. cit. papers) on sets of (Skolem) ground terms, but in a more effective 
way. To get a small evaluation on a given set of terms, we first sort its members, and then require the 
equality relation to be a congruence. /->^ 

We will call the ground terms constructed from Skolem function (and constant) symbols, simply terms. 
For a set A, its cardinality will be denoted by |y4|, and for a sequence s, its length will be also denoted by 
\s\. The {i + l)th member of s is denoted by {s)i for any i < \s\; so s = ((s)o, (s)i, . . . (s)|s|_i). Let ~ and 
-< be two new symbols, not in the language of arithmetic Ca = (0, S, +, ■, ^). 



Definition 2.5 (Pre-Evaluation) For a set of terms A (with |A| ^ 2), a pre- evaluation on A is a 
sequence p that satisfies the following conditions: 

(1) length of p is \p\ = 2|A| — 1; 

(2) for any ^ i ^ \A\ — 1 we have {p)2i £ A; 

(3) for any 1 ^ i ^ \A\ — 1 we have {p)2i-i G {-<, ~}; 

(4) for any term t E A there exists a unique ^ j ^ |A| — 1 such that {p)2j = t- 



In other words, a pre-evaluation on A sorts (organizes) the terms in A, starting from the smallest and 
ending in the largest. 

Example 2.6 A pre-evaluation on {ao? «i, c^2, «3, «4, «5, ^e} is a sequence like 
p = (a4,-<,a7,~,ai,~,a5,-<,a3,-< a6,~,tt2)- 

Definition 2.7 (Equality and Order in Pre-Evaluations) In a pre-evaluation p on A define the re- 
lations ~p and -<p on A^ by the following conditions for s,t G A.- 

(1) s t if there exists a sub-sequence q of p of length 2/ — 1 (1^1) such that 

(a) either ({q)o = sk{q)2i-2 = t) or ({q)o = tL{q)2i-2 = s); 

(b) for any 1 ^i - 1, (g)2i-i = ~. 

(2) s -<pt if there exists a sub-sequence q of p of length 21 — 1 (1^1) such that 

(a) (g)o = s and (g)2/-2 = t; 

(b) there exists some 1 ^ i ^ / — 1 for which {q)2i-i = ~<- ^ 



Example 2.6 (Continued) We have ai ~p as ~p aj and 02 ~p ae- Also, 04 -<p ai, 04 -<p cts, -<p ay. 



Oi -<p <y2, Oil -<p as, and ai -<p hold. 

Lemma 2.8 (Equivalence and Order by Pre-Evaluation) Let A be a set of terms, and p be a pre- 
evaluation on A. 

(1) The relation ^p is an equivalence on A. 

(2) The relation -<p is a total order on A. 

(3) The relations ~p and -<p are compatible with each other: if t ~p s, and t -<p u (respectively, u -<pt), 
then s -<pU (respectively, u -<p s). 

(c) Saeed Salehi 2011 http://saeedsalehi.ir/ ^Ea^efe 
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Proof. The parts (1) and (2) are immediate. For (3), suppose t s and t -<p u. Then there is a 
sub-sequence q of p which starts from t and ends with u and contains at least one special symbol -<. There 
must also be some other sub-sequence r which starts from either t or s and ends with the other one, and 
all its special symbols are equality ~. If r starts from s (and so ends with t), then the concatenation of 
r and q results in a sub-sequence which starts from s and ends with u and contains some special symbol 
-<. Whence s -<p u. And if r starts from t, then q cannot be a sub-sequence of r because all the special 
symbols in r are ~ and q contains at least one special symbol -<. Thus r has to be a sub-sequence of q. 
Then there must exist a sub-sequence of p which starts from s and ends with u and contains a special 
symbol -<; whence s -<p u. The other case {u -<p t) can be proved very similarly. □ 



Definition 2.9 (Evaluation) A pre- evaluation p on a set of terms A is called an evaluation when, for 
any term t, s G A and any term u{x) with the free variable x, if t ^p s and u{t / x) , u{s / x) G A hold, then 
u{t/x) «p u{s/x) holds too. ^ 

In other words, an evaluation on A is a pre-e valuation p on A whose equivalence relation ^p is a congruence 
relation on A. ^ — 

Definition 2.10 (Satisfaction in an Evaluation) Let A be a set of terms and p an evaluation on it. 
For terms t, s & A we write p \= t = s when t ~p s holds. We also write p \= t ^ s when either t ~p s or 
t -<p s holds. So, for atomic formulas in the language of arithmetic La we have defined the notion of 
satisfaction p \= (f. The satisfaction relations can be extended to all open (quantifier-less) formulas as: 

• p \= A ip <^=^ P \= o-nd p\= ip 

• p\= ipM ip <^=^ p\= ^ or p\= if) 

• p \= if ^ ip <^=^ if p\= if then p\= ip 

Lemma 2.11 (Leibniz's Law) Any evaluation p on any set of terms A satisfies all the available Skolem 
instances of the axioms of equational logic, in particular Leibniz's Law: for any t, s G A and any open 
formula (p{x), we have p \= t = s A ip(t) — )■ v?(s). 

Proof. Suppose p \= t = s. By induction on (the complexity) of (the open formula) if one can show that 



p 1= (p{t) if and only if p |= (p{s). For atomic (f it follows from Lemma 2.8, and for the more complex 



formulas it follows from the inductive definition of satisfaction in evaluations. □ 



Definition 2.12 (T— evaluation on A) For a set of terms A, an Skolem instance of a formula is called 
to be available in A if all the terms appearing in it belong to A. For a theory T and a set of terms A and 
an evaluation p on A, we say that p is an T— evaluation on A if p satisfies every Skolem instance of every 
sentence in T which is available in A. <^ 

So, T— evaluations, for a theory T, are kind of partial models of T. Indeed, if A is the set of all (ground) 
terms (constructed from the language of T and the Skolem function symbols of the axioms of T), then any 
T— evaluaton on F (if exists) is a Herbrand Model of T. Herbrand's Theorem can be read as "^4 theory T is 
consistent if and only if for every finite set of (Skolem) terms, there exists an T— evaluation on it." Thus, 
the notion of Herbrand Consistency of a theory T is (equivalent to) the existence of an T— evaluation on 
any (finite) set of terms. 
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Example 2.13 Let T be axiomatized by the following sentences in La- 

• ^x\x-0=0\; L \ 

• 3y ^ 0-0[y = 0-0]AWx[3y ^ x-x[y = x-x] — )■ 3y ^ S{x)-S{x)[y = S(x)-S(x)]] — i- \/x3y ^ x-x[y = x-x]. 



Let A = {0, ■ 0,c,c ■ c, q(c), S(c) ■ S(c),t, t ■ t,q(i(:)} where c and q are as in Example 2.4 As we saw in that 
example, the following is an instance of the the second axiom (Inda), which is also available in A: 

0^0-0] V ' 

[[q(c) ^ c ■ c A q(c) = c ■ c] A [S(c) ■ S(c) ^ S(c) • S(c) V S(c) ■ S(c) ^ S(c) ■ S(c)]] V 

[q(t) ^ t-t Aq(t) =t-t]. /-i. 

Suppose p is an T— evaluation on A. By the first axiom p must satisfy the instance 0-0=0, so we should 
have p \= ■ = 0. Thus, p cannot satisfy the first disjunct of the above instance. Indeed, p cannot satisfy 
the second disjunct either, because for any term u we have p \= u ^ u Au = u. Thus, p cannot satisfy the 
second conjunct of the second disjunct. Whence, p must satisfy the third disjunct of the above instance, 
and in particular we should have p \= q(t) = t ■ t. <^ 

Definition 2.14 (Skolem Hull) Let be the language expanding Ca by the Skolem function (and 
constant) symbols of all the existential formulas in the language Ca- Or in other words, is the set 
~ {f3xtfi{x) \ ^ is an Ca — formula}. For a given set of terms A, let A^^^ be defined by induction on j : 

A<o) = A, and 

A(i+i> = aO-> u {/(ti, ...,tj \ feCAt,,.. . ,t^G A<^-)} U {f3,^(,)(ti, ...,tJ\^ip^^jA ti, . . . ,t^GA<^->}, 
where is the Gddel code of ip. , <^ 



Bounding the Godel code of ip in the above definition will enable us to have some efficient (upper bound) 
for the Godel code of A<^> (see [III [12]). 

Herbrand's theorem implies that for any 3i— formula 3xil){x) (where il) is an open formula) and any 
theory T, if T h 3x%l){x) then there are some (Skolem) terms ti, . . . ,tn such that T^^ h ip{ti) V ... V ip{tn)- 
Usually this observation is called Herbrand's Theorem. We will need a somehow dual of this fact. 

Lemma 2.15 (Herbrand Proof of Universal Formulas) For a\fi—formula'ix%l){x) (whereip is open) 
and a theory T, suppose T h Mxip^x). Let A be a set of terms and t E A. There exists a finite (standard) 
k ^ such that for any T— evaluation p on we have p \= ip{t). 

Proof. By T h "^xiplx) the theory T^^ U {-itp{c)}, where c is the Skolem constant symbol for 3x-itlj{x), is 
inconsistent. Suppose (p is the rectified negation normal form of -tip. Then, by Herbrand's theorem, there 
exists some finite set of terms F such that there can be no (T^'^U {<y9(c)})— evaluation on it. Since c appears 
in r we write it as r(c), and by r{t) we denote the set of terms which result from the terms of r(c) by 
replacing c with t everywhere. It can be clearly seen that there exists some k eN such that r(t) C A<^>. 
Whence, there cannot be any {T^^ U {(^(t)})— evaluation on A^'^'^ Thus, any T— evaluation p on A^^^ must 
satisfy p ^ Lp(t) or p \= ipit). □ 



Example 2.16 Let the theory T, in the language of arithmetic Ca, be axiomatized by 

(1) Vx[S(x) ^ 0] (2) Vx, y[x + %) = S(x + y)] 

(3) Wx3z[x 7^ — i- X = S{z)] (4) Vx, y3z[x ^y-^z + x = y] 

For the open formula ^/'(x) = (x ^ — ?■ x = 0) we have T h Vx'?/'(x). 
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Letp{x) be the Skolem function for the formula 3z[x = OVx = S{z)], andi>{x,y) be the Skolem function 
for the formula 3z[x ^ y V z + x = y] . Then the Skolemized form T^^ of the theory T will be as: 

(1') S{x) + (2') X + S{y) = S{x + y) ^ y 

(3') x = OV x = S(p(x)) (4') x^yV b,{x, y) + x = y " J 

For a fixed term t let Tf be the following set of terms: 

Tt = {0, t, ^(t, 0)Mt, 0) + t, p(t), S(p(t)), Kt, 0) + p(t), Kt, 0) + S(p(t)), S(Kt, 0) + p(t)) }. 
Now we show that any T— evaluation p on Tt must satisfy p \= ip{t) or, equivalently, if p \= t ^ then 
p \= t = 0. Assume p \= t ^ 0. Then by the fourth axiom we have p \= i>{t, 0)+t = 0. If p \= t = does not 
hold, then p \= t ^ 0, so by the third axiom we have p \= t = S(p(t)). Whence, p \= \){t, 0) + S(p(t)) = 0. 
On the other hand, by the second axiom, p h W^O) + S(p(t)) = S{\){t,0) + p(t)). So, we infer that 
p 1= S(^(t, 0) +p(t)) = 0, which is in contradiction with the first axiom. Thus, p\= t = must hold, which 
shows that p \= ip(t). ^ 

As was mentioned before, for a consistent theory T there must exist some Herbrand Model of T. 

Definition 2.17 (Definable Herb rand Models) Let A be a set of terms, and define its Skolem Hull to 



be A<°°) = U A<") (see Definition 2.14). For an evaluation p on A<~>, let M{A,p) = {t/p \ t e A<°°>}, 



where t/p is the equivalence class of the relation containing t (cf. Lemma 2.S). Put the structure 

(1) . . . , tjp) = f{t„ tj/p, 

(2) = {(ti/p, . . .,tjp) I p h R{tu . . .,tm)], 

on £OT(A,p), for any m—ary function symbol f and any m—ary relation symbol R. <^ 

Lemma 2.18 (Herbrand Models by Evaluations) The structure on S[)T(A,p) is well-defined, and for 
a theory T, if p is an T— evaluation on A then !DT(A,p) \= T . □ 



3 Bounded Arithmetic and Herbrand Consistency 

By an efficient Godel coding (see e.g. Chapter V of [5j) we can code sets, sequences (and so the syntactic 
concepts like Skolem function symbols, Skolem instances, evaluations, etc.) such that the following ([5]) 
hold for any sequences a, /3: 

• '"a * /?"' ^ 64 ■ ('"a"' ■ '"/?"'), where * denotes concatenation; 

• \a\ ^ log('~Q;~'). 

It follows that for any sets A, B we have ^ AUB^ ^ 64- (^^^-^5^) and \ A\ ^ log(^A^). We write X e 0{Y) 
to indicate that X ■ n + n for some n G N; that is X is linearly bounded by Y . The above (efficient) 
coding has the property that for any sequence U = {ui, . . . ,ui) we have log('"f/~') G (^(Xlj ^^sC" ^'^^ 
any evaluation p on a set of terms A it can be seen that log('~p~') G (9(log('~A~')). 

Let us note that all of the concepts introduced so far can be formalized in the language of arithmetic 
Ca- Here we make the observation that, having an arithmetically definable set of terms A, the sets A^-'^ 
are all definable in arithmetic (in terms of A and j), but the set A^°°^ is not definable by an arithmetical 
formula. We will come to this point later. The arithmetical theory we are interested here is denoted by 
IAq which is usually axiomatized by Robinson's arithmetic, in the language Ca, plus the induction axiom 
for bounded formulas (see e.g. |S]). 
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In this section we prove our main result: tlie existence of a finite fragment T C IAq wliose Herbrand 
Consistency is not provable in IAq. As the exponential function x t— )■ 2^ is not available (provably total) in 
IAq, then we denote by log the set of elements x for which exp(x) = 2^' exists. Let us note that for a model 
Ai, the set log(A^) is the logarithm of the elements of A^. The set (og is closed under S and +, but not 
under x, in IAq. We will use the term cut for any definable and downward closed set (not necessarily closed 
under S) in the arithmetical models. The formula "y = exp(a;)" is expressible in Ca, and IAq can prove 
some of the basic properties of exp (cf. [5]), though cannot prove its totality: IAq \/Wx3y[y = exp(x)]. By 
log^ we denote the set of elements x for which exp^(x) = 2^"" exists; the superscripts on top of the functions 
denote the iteration. Similarly, log" = {x \ 3y[y = exp"'(x)]}, where exp" denotes the n time iteration of 
the exponential function exp. 

We use a deep theorem in bounded arithmetic, which happens to be the very last theorem of [5j. It 
reads, in our terminology, as: ^ 

For any k ^ there exists a bounded formula f{x) such that 
lAo + fii h Vx G Iog^+V(a;), but IAq + fii ^ Vx G IogV(a;). 

It can be clearly seen that the theorem also holds for IAq instead of IAq + fii, and for any cut / (and 
its logarithm log J = {x \ 3y E I[y = exp(x)]}) instead of (og'^ (and its logarithm log'^^^); see also [3] and 
(Theorem 3.6 of) [H]. V - 

Theorem 3.1 (Hi— Separation of Logarithmic Cuts) For any cut I there exists a bounded formula 
(p{x) such that IAq U {3xG/ ^pix)} is consistent, but IAq U {3xGlog/ ^p{x)} is not consistent. □ 

We will find the desired finite fragment of IAq (whose Herbrand Consistency is not provable in IAq) in 
three steps (the following subsections) before proving the main result (in the last subsection). For doing 
so, we will show that for sufficiently strong finite fragments of IAq, like T, if IAq h HCon(T) then the 
consistency of the theory IAq U {3xG/ 9{x)}, for some suitable cut I and a suitable bounded formula 9, 



implies the consistency of the theory T U {3xGlog/ 0{x)}. As we will see, this contradicts Theorem 3.1 
3.1 The First Finite Fragment 

Assuming the consistency of the theory IAq U {3x G / !f{x),B.Con{T)}, and inconsistency of the theory 
TU{3x Glog I ip{x)}, we can construct a model VJt, from a given model M. \= IAoU{3xG / (^(x), HCon(T)}, 
such that 9Jt |= TU {3xGlog/ (f{x)}; which is in contradiction with the assumptions. For that, let us take 
a (hypothetical) model Ai \= IAq U {aG / A (p{a)} U {HCon(r)} for some a G Ai. Then we form the set 
r = {0, 1,2,... ui{a)} where z is a term in Ca representing the number i, defined inductively as = and 
i + I = S{i). From the assumption Ai \= HCon(T) we find an T— evaluation p on A^^\ for a suitable j and 
a suitable A which contains the above set F. Then we can form the model DJl{A,p) and, by some technical 
details, show that 9Jl(A,p) |= T + 3x G log Iip{x). The bound ui{a) assures us that the set F contains 
the range of (the bounded) quantifiers in the (bounded) formula ip{a). For the Godel code of i we have 
log(^r) G C(log(2^)) and so log(^r^) G C(log(2(^i("))')) whence hg{^T^) G C(log (exp2(2(logaj2))). We 
need the closure of F under the Skolem function symbols of (a finite fragment of) IAq, that is T^°°^ (see 



Definitions 2.17 and 2.14). Since, unfortunately, that set is not definable, we consider the set F^-^^ for a 
non-standard j, which makes sense if '"F"' (and so a) is non-standard. In case a is standard, then the proof 
becomes trivial (see below). For some non-standard j with j ^ log^('"F~') we can form the set F^-'^ in case 
6<;2(^F^) exists (see [IIIII2]). And finally we have log ^(^r^)) G C(log (exp2(4(loga)^))). 
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Definition 3.2 (The Cut X) The cut Z is defined to be {x \ 3y[y = exp^(4(loga)^)]}, and its logarithm 
is logX = {x I 3y[y = exp^(4a'')]}. L } ^ 



Applying theorem 3.1 to the cut X defined above, we find a (fixed) bounded formula 6 and a finite fragment 
To C IAq such that the theory the theory IAq U {3x gI9{x)} is consistent, but Tq U {3x e logX6'(x)} is 
not consistent. f'^-- 



Definition 3.3 (The First Fragment Tq) Let Tq be a finite fragment of IAq for which there exists a 
(fixed) bounded formula 6 such that the theory IAq U {3x&X6{x)} is consistent, but Tq U {3xGlogX6'(a;)} 
is not consistent. Let M. be a (fixed) model such that M. \= IAq U {3x eX6'(a;)}. ^ 

In the rest of the paper we will show that for a finite fragment T of IAq extending Tq we have that 
Ai ^ HCon(T), where HCon is the predicate of Herbrand Consistency. 



3.2 The Second Finite Fragment 

The proof of the main result goes roughly as follows: if |= HCon(T), for a finite fragment T C IAq 
to be specified later, then there exists (in Ai) some T— evaluation p on some A^-'^ where A ^ F is 
to be specified later and F and j are as in the previous subsection. Whence we can form the model 
OJt(A,p), for which we already have 9Jl(A,p) |= T. Our second finite fragment Ti will have the property 
that if T ^ Ti then fH(A,p) |= 6Q{a/p). The third finite fragment T2 will have the property that if 
T D T2 then we have OJt(A,p) |= a/p G logX. So, finally we will get the model OJl(A,p) which satisfies 
£OT(A,p) 1= T + [a/pG logX A 6'o(a/p)], or, in the other words, Tl{A,p) \= T U {3xGlogX6'o(a;)} which is in 
contradiction with (the choice of the first finite fragment) Tq C T. 

Definition 3.4 (The Second Fragment Ti) Let Ti be a finite fragment of IAq which can prove the 
following (IAq— provable \/*—) sentences: 



X + = X 

x-0= 

X ^ ^ X = 

X ^ y y y ^ X 

X ^ Z + X 



X + S{y) = S{x + y) 

X ■ S{y) = X ■ y + X 

X ^ S{y) ^ X = S{y) V x ^ ?/ 

x^y^z^x^z 
X ^ X + z 

z^OAx-z^y-z-^x^y 
X ^y ^ S{y) ^ X 



• x + z^y + z-^x^y 

• X ^ y ■v^ S(x) ^ y V Siy) ^ x 

and also can prove the following (IAq— provable \/*3*—)sentences: 

• X ^ y — 7- 3z[z + X = y] 

• y ^ 3g, r[x = r + q- yAr^y] 



Remark 3.5 It can be seen that Ti can prove the following arithmetical sentences: 

• S(x) 7^ • S{x) = S{y) X = y 

• S(x) ^ X • X 7^ — 7- 3y[x = S{y)] 

For a proof, first note that byx^y\/y^x we have Wu[u ^ u], and also from x ^ z + x and x + = x 
we get \/u[0 ^ u]. Now, if S{u) = 0, then S{u) ^ 0, and so by the axiom x ^ y ^ S{y) ^ x we get 
^ u, contradiction! Also from the same axiom it follows that m ^ m f-)- S{u) ^ u, and thus S{u) ^ u. 
If S{u) = S(f ) and u ^ V then by x ^ y S(x) ^ y V S{y) ^ x we have either S{u) ^ v or S{v) ^ u. 
If S{u) ^ V then S{v) ^ v, contradiction! The other case is similar. Finally, assume u ^ 0. Then by 
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x^0^x = Owe have u ^ and so the axiom x ^ y ^ S{y) ^ x implies that S{0) ^ u. Thus, by 
X ^ y ^ 3z[z + X = y] we have v + 5(0) = u for some v. Then from x + S{y) = S{x + y) and x + = x 
we conclude that S{v) = u. Q.E.D 

The main property of Ti is the following: 

Theorem 3.6 (The Main Property of Ti) Suppose M h IAq + [a G I A e{a)] + HCon(T) is a non- 
standard model where 9 is a hounded formula and a E M. is non-standard and T h Ti . If p E M. is an 
T— evaluation on A^-^^ where A is a set of terms such that A D T = {i \ i ^ ui{a)} and j is a non- 
standard element of M., then for any hounded formula '■p{xi, . . . ,Xn) and any elements ii, . . . ,in ^ a, 
M \= ip{ii, . . . ,in) M{A,p) \= (p{ii/p, . . . ,in/p)- 

We prove the theorem by induction on (the complexity) of (f (see also |TT1 [T2]). 

Lemma 3.7 (Another Property of Ti) Suppose K, \= Ti and a^K,, and let t he a term in La- For any 

ii, . . . ,in ^ a in IC and any b^K,, if IC \= b ^ t{ii, . . . ,in) then there exists a term s and there are some 
ji, ...,jm^a such that JC \= b = s{ji, . . . ,jrn)- 

Proof. By induction on t: v ^ ) 

• t = 0: if/C|=6^0 then by the Ti— axiom x^O-v^x = Owe have K, \= b = 0. 

• t = S{ti): if /C 1= 6 ^ S(ti) then by x ^ S{y) ■v^ x = S{y) V x ^y which is a Ti— axiom, we have 
K. 1= 6 = S(ti) V 6 ^ ti, and the result follows from the induction hypothesis. 

• t = ti + 12: if /C 1= 6 ^ ti + ^2 then by the Ti— axiom x ^ yV y ^ x we have that /C |= 6 ^ t2 V t2 ^ 
If }C \= b ^ t2 then the conclusion follows from the induction hypothesis. Otherwise if K, \= t2 ^ b then 
by a; ^ ?/ — 7- 3z[z + x = y] (another Ti— axiom) there exists some d E K, such that K, \= d + t2 = b. Thus 
IC \= d + 12 ^ ti + 12, whence by the Ti— axiom x + z^y + z-^x^ywe have )C \= d ^ ti, and the 
desired result follows from the induction hypothesis and the fact that /C \= b = d + 12. 

• t = ti ■ t2: assume K. \= b ^ ti ■ t2. If /C |= ^2 = then /C |= ti ■ ^2 = by the Ti— axiom a; ■ = 0. 
And so /C 1= 6 ^ is reduced to the first case above. Now suppose /C |= ^2 7^ 0. Then by the Ti— axiom 
y 7^ — > 3q,r[x = r + q ■ y Ar ^ y] we have K, \= b = r + q ■ t2 A r ^ t2 for some g, r G /C. By the Ti— axiom 
X ^ z + X we have IC \= q ■ t2 ^ r q ■ t2 = b ^ ti ■ t2 and so from the Ti— axiom x^y^z^x^z 
it follows that K, \= q ■ t2 ^ ti ■ t2, and the Ti— axiom z^OAx-z^y-z^x^y implies that 
/C 1= g ^ ti (since /C |= ^2 7^ 0). Now, the desired conclusion follows from the induction hypothesis and 
]C^b = r + q-t2Ar^t2Aq^ti. □ 



Lemma 3.8 (Preservation of Atomic Formulas) With the assumptions of Theorem 3.6 for any atomic 
formula f{xi, . . . , x„) and any ii, . . . , i„ ^ a, we have that 

M\=ipiii,...,in) m{A,p) \= Lp{ii/p,. . . ,in/p)- 

Proof. By the Ti— axioms x ^ y ■h^ S(x) ^ ?/ V S(?/) ^ x and x ^ y ^ S{y) ^ x it suffices to prove the one 
direction only: Ai \= (p{ii, ■ ■ ■ ,in) =^ 2Jl(A,p) |= ip{ii/p, . . . , in/p)- If = "t ^ s" for some £a— terms t 
and s, then |= t ^ s implies the existence of some bEM. such that M. \= b + 1 = s. By the Ti— axiom 



X ^ X + z, M. |=6^ssoby Lemma 3.7 there exists an term r (and some ji, . . . , jm ^ o) such that 
IC \= b = r . Whence, \= r + 1 = s. So, noting that A^,£DT(A,p) |= Ti, it suffices to prove the lemma for 
the atomic formula (p of the form cp = ^^t = s" . 

For that we first note that if zi, ^ a then t{ii, . . . ,in), s{ii, . . . ,in) ^ i^i(a) holds. Suppose we 

have Ai \= t{ii, . . . ,in) = s{ii, . . . ,in) = i- We show by induction on (the complexity of) t that the 
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condition |= t{ii, . . . ,in) = i implies 9Jt(A,p) |= t{ii/p, . . . , in/p) = i/p- Let us note tliat tlie statement 
£OT(A,p) 1= t{ii/p, . . . , in/p) = i/p is equivalent to M. |= "p |= t{ii, . . . ,in) = f- So, it suffices to show the 
equivalence A4 \= t{ii, . . . , z„) = z -H- "j9 |= t{ii, . . . ,in) = i" by induction on t. For t = and t = S(ti) 
the result follows from the definition = and j ' + 1 = S(j). And for t = ti +t2 and t = ti ■ t2 the result 
follows from the Ti— axioms x + = x, x + S{y) = S(x + y), x ■ = 0, and x ■ S{y) = x ■ y + x. □ 



Hence, the lemma also holds for open formulas (p as well. For bounded formulas we note that the range 
of quantifiers of (p{ii, ■ ■ ■ ,in) for ii, ... ,in ^ a is contained in the set {j \ j ^ ui{a)}. This is formally 
expressed in the following lemma. 



Lemma 3.9 (End-Extension Property) With the assumptions of Theorem 3.6, if for some i ^ a and 
some term t we have {Ai \=)p \= t ^ i then there exists some j ^ i such that {Ai \=)p \= t = j . 



Proof. By induction on the term i. For z = 0, if p |= t ^ then by Lemma 2.15, and the Ti— axiom 
s ^ ^ X = 0, we have p \= t = = 0. For i = S(j), if p |= t ^ S(j) then by Lemma 



Ti— axiom x ^ S{y) <r^ x = S{y) W x ^ y, we must have that p 
follows from the induction hypothesis. 



2.15 



and the 

t = S{j) y t ^ j . Now the conclusion 

□ 



Now we can prove Theorem 3.6 



Proof, (of Theorem 3.6) By induction on (the complexity of the bounded formula) (p. As the lemma 
has been proved for open formulas ip, it suffices to show that if the lemma holds for the (bounded) formula 
ip then it also holds for the (bounded) formula 3x ^ t{ii, . . . , in)^{x, ii, . . . ,in) where t is an term; in 
the other words: / 

M\=3x ^ t{ii, . . . ,in)(p{x,ii, ...,in) 2Jl(A,p) h 3x ^ t{ii/p, . . . ,in/p)ip{ii/p, ■ ■ -.in/p)- 

• If 1= & ^ i(H, • • • , ^n) A Lpip, ii, . . . , in), for some h E M., then by Lemma |3]7 there are terms s and 
elements ji, . . . ,jm ^ ci such that Ai \= b = s{ji, . 



1 Jr, 



So, we have M \= (pis{ji, . . . ,jrn), H, 



Whence, by the induction hypothesis we also have nH(A,p) |= (p{s{ji/p, . . . , jm/p),H/p, ■ ■ ■ , in/p), thus, 
noting that we already have OJl(A,p) |= s{ji/p, . . . ,jm/p) ^ t{ii/p, . . . , in/p), the desired conclusion holds: 
Wl{A,p) 1= 3x ^ t{ii/p, . . . ,in/p)ip{ii/p, ■ ■ ■,in/p)- 

• Conversely, if 9Jl(A,p) |= c? ^ t{ii/p, . . . , in/p) A ip{d, ii/p, . . . , in/p) holds for some d G Wl{A,p) then by 

^ a/p such that OJl(A,p) 



Lemma 3.7 there are some C a— term s and some /i. 



5 Im 



d = s{l 



1; 



For each a ^ m there is some term G A^°°^ such that = ^ajp- For each such ot we also have that 
9Jl(A,p) 1= iajp ^ ajp or equivalently M. |= "p |= ^ So, by Lemma 3.9 there exists some Jq, ^ a 
for which we have Al |= = ja- Whence, 9Jl(A,p) |= = sijxjp, . . . ,im/p) and so 

aJt(A,p) H s{ii/p,. . . ,]jn/p) ^ t{ii/p,...,in/p), and 

2?t(A,p) \= ip{s{ji/p, . . . ,jrn/p),il/p, ■ ■ ■ ,in/p)- 

Thus, by the induction hypothesis we have 

M \= s(ji, . . . Jrn) ^ t{ii, . . . ,i„), and M \= <pis{ji, . . . , jm),«l, • • •,««)• 
So, we conclude that Ai \= 3x ^ t{ii, . . . ,in)'p{x,ii, . . . ,in)- □ 



Let us repeat where we are now: in looking for a finite fragment T C IAq such that IAq 1/ HCon(T) 

we found a finite fragment Tq C IAq and a bounded formula 9{x) such that Tq I 3x E\ogI9{x) but the 

theory IAq + 3xeX6{x) is consistent and has a model Ai \= IAq + [aGX A 6{a)]. Then we aim at showing 
that Ai ^ HCon(T). If |= HCon(T) then we form the set of formulas T = {i \ i ^ u}i{a)} for which 
W2('~r~') exists (by the very definition of X and the assumption a e X), and so we can form the model 
9yt{T,p) where p is an T— evaluaiton on F^-'^ (where j ^ log''('~r~') can be taken to be non-standard if a is 
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so). The theory Ti had the property that Vyt{T,p) |= 6{a/p) (by Theorem 3.6), and in the next subsection 
we introduce a finite fragment T2 C IAq such that for a suitable A D F (to be defined later) we will have 
Wl{A,p) \= a/pG log X. Then by taking T to be any finite fragment of IAq which extends Tq U Ti U T2 we 
will conclude that M |= ^HCon(T). 

3.3 The Third Finite Fragment C*V 

The fragments Tq and Ti were chosen not by their axioms but by their implications; Tq had to prove 
■^3x E \ogX9{x) (Definition 3.3), and Ti had to prove some certain arithmetical statements (Definition 3.4[ ). 



But for T2 we require that it contains one of the following sentences as (one of) its (explicit) axioms (not 
only its consequences). 

Definition 3.10 (Axioms for Totality of Squaring Function) (1) The induction principle for the 
bounded formula ipi^x) = "3?/ ^ x'^[y = x-x]" is denoted by Indn : ip{0) AWx(^ip{x) — )■ i/j^S^x))) — t- ^xip{x). 
Or, in other words (cf. Examples 2.4\2.13 ) Indn, which is an axiom of the theory IAq, is the sentence: 



3y ^ CF[y = - 0] A Vx(3y < x'^[y = x ■ x] 3y ^ 5{x)'^[y = S{x) ■ S(x)]) ^> Vx3t/ ^ x'^[y = x ■ x]. 
(2) The Hi— sentence expressing the totality of squaring is denoted by Qq : "^x^y ^ x'^[y = x ■ x] 



We denote by q(x) the Skolem function symbol of the formula 3y ^ x'^[y = x ■ x ] (cf. Examples [2l|2.13| ). 
Then the Skolemized forms of the axioms of Definition 13.101 will be as 

1. [u^ O^Vm^O-O] V 

[[q(c) ^ A q(c) =c-c]A[v^ S(c)2 V i; ^ S(c) • S(c)]] V 

[q(x) ^ a;^ A q(a;) = x ■ x], 

where u,v,x are free variables and c is the Skolem constant as in Example 2.4 

2. q(a;) ^ a;^ A q(x) = x ■ x. 

Define the terms q/s by induction: c\q = S(S(0)) and q^_^_i = q(qj). It can be easily seen that represents 
the number exp^(z), while for the code of q^ we have log('~qj^) G (9( log(exp(i))) . That is to say that 
while the value of the term q^ is of double exponential, the code of it is of (single) exponential. This (one) 
exponential gap, will make our proof to go through. 

Formulating the statement "x G log^" can be stated as "there exists a sequence s such that (s)o = 2 and 
\s\ = x+1 and for any i < x we have (s)i+i = (s)i-(s)j". And G logX" can be stated as "4?/'^ G log^". Put 
T = {qj I i ^ 4a^}. Then any JIq— evaluaton or Indn— evaluation on T^°°^ must satisfy q^^^ = q^ -q^ for any 
i < 4a^. If p is any such evaluation, then 9Jt(T,p) \=\/i < 4:{a/p)^[q^^i/p = qjp-qjp]. We require the finite 
fragment T2 C IAq to have the property that for any model /C |= T2 if there are elements qo,qi, . . . ,qb E )C 
such that K. satisfies go = 2 and g^+i = qf for any i < b, then K, \= b E log^. Let us note that the code of the 
sequence (exp^(O), exp^(l ),..., exp^ (6)) is roughly bounded by nj^fe6xp^(z) ^ (exp^(6))^ = exp^(6 + 1). 
So, in the presence of qo,qi, ... ,qb E IC with the above property, the (code of the) sequence s with the 
property "(s)o = 2, |s| = x + 1 and for any i < x, (s)j_|_i = (s)j ■ {s)" must exist. Note also that 
lAo h Vz[i G Iog2 ^ z + 1 G Iog2]. (*) 

Definition 3.11 (The Third Fragment T2) (1) If the usual axiomatization of IAq is taken into ac- 
count, then let T2 be a finite fragment of it which contains the axiom Indn o,nd has the property (•*) 
above. 
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(2) //IAq has been axiomatized all by Hi— formulas, where the induction axioms are in the form 

Wy[ip{0) A Vx < y[(p{x) — )■ {p{S{x))] — > Va; ^ yip{x)) 
for bounded ip, then we take the theory T2 to be a finite fragment of lA^ + Qq, where lA^ is the above 
Hi — axiomaitzation of IAq, together with the axiom Qq, such that it has the property (*) above. So, in 
this case T2 is a Hi — theory. ^ 

Let us reiterate the main property of T2 again. ^ 

The Main Property of T2 For a model /C |= T2 if tliere are qo,qi, ■ ■ ■ ,qb € K, sucli tliat for any j < b 
we liave /C ^ Qj+i = q] then /C h e log^". ^ 



3.4 The Proof of the Main Result 

Let T be any finite fragment of IAq or lAj/ + Qq such that T D Tq U Ti U T2. If r2 is taken as in the 



clause (1) of Definition 3.11 then T is truly a finite fragment of IAq, and if T2 is taken as in the clause 



(2) of Definition 3.11 then T is a finite IAq— derivable IIi— theory, whose conjunction (denoted by U) is a 



IAq— derivable IIi— sentence. 

Theorem 3.12 (The Main Theorem) (1) For a finite fragment T of IAq we have IAq 1/ HCon(T). 

(2) There exists an IAq— derivable Hi — sentence U such that IAq l/HCon(f/). 



Proof. For the part (1) take T2 as in clause (1) of Definition 3.11 , and for part (2) take T2 as in clause (2) 
of Definition |3.11[ and let U be the conjunction of the axioms of T. In each case we will have the Skolem 
function symbol q(x) for squaring x t— )■ x^. 



By Theorem 3.1 there exists a (fixed) bounded formula 6'(x), for the cut X defined in Definition 3.2 



such that lAo \f elB{x) and Tq h ^3xGlogX^(x) (see Definition^. Fix M |= IAq + [aGX A 0(a)]. 
We show that M ^ HCon(T). 

Assume, for the sake of contradiction, that Ai |= IICon(T). Define the terms z's and q/s by induction: 
= 0, i + \ = S(i), qo = 2, q^j^i = q(qj). Let A be the set of terms {i | i ^ Wa(a)} U {q^ | i ^ cJi(a)} in 
M.. As we saw earlier, the code of i (and qj are bounded by some polynomial of exp(z) and the code of 
the A is polynomially bounded by exp ((u;i(a)^)) or exp^ (2(loga)^), and finally c<;2('"A~') is polynomially 
bounded by exp^ (4(loga)^); which exists by the assumption a G X. We note that a is non-standard, 
because otherwise we would have a G logX and whence M. would be a model of the inconsistent theory 
IAq + 3xGlogX0(x); a contradiction with the hypothesis. The existence of a;2('~A~') assures the existence 
of a non-standard element j(^ log^('~A~')) for which A^-'^ exists, and so by the assumption A4. |= HCon(T) 
there must exist some T— evaluation p on A^-'^ (hence, on A^°°^) in AA. So, we can form the model 



9Jl(A,p). For this model we have 9Jl(A,p) |= T by Lemma |218l Since M |= 0(a) (and 3Jl(A,p) |= Ti) 
then 2Jt(A,p) |= 9{a/p) by Theorem 3.6 Also, since 9Jl(A,p) |= T2 and qg, q^^, . . . , q^ (for b = 4a'') are 
elements of 9Jl(A,j9) such that Tl{A,p) |= qg = 2 and 2Jt(A,p) |= q^^.^^ = q^ for any i < b, then (by 
the main property of T2) dJt{A,p) \= "6 G log^". Or, in other words, 9Jt(A,p) |= "a/pGlogX". Whence, 
DJl{A,p) 1= [a/pGlogXA6'(a/p)]. So, 3Jt(A,p) is a model of T+3xGlogX6'(x), and this is contradiction with 
the assumption of T D Tq and the inconsistency of the theory Tq + 3xGlogX0(x). Thus A4 ^ HCon(T) 
and so lAo ^HCon(T). □ 
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